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We demonstrate experimentally that it is possible to prepare and detect photon pairs created by 
spontaneous parametric down-conversion which exhibit simultaneous position-momentum and po- 
larization correlations that are adequate to implement a four-dimensional key distribution protocol. 
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Quantum key distribution (QKD) is currently one of 
the most promising areas of quantum information. To 
date there are many QKD protocols beginning with 
the seminal work of Bennett and Brassard 2?| , commonly 
known as the BB84 protocol. While BB84 uses single 
particles, also well-known is the Ekert protocol [sj, which 
utilizes entangled pairs to distribute a random and se- 
cure key. Bennett, Brassard and Mermin (BBM) have 
adapted the BB84 protocol to entangled particles, and 
shown that_the BB84 and Ekert protocols are essentially 
equivalent 4|. 

The object of QKD is to establish a random and secret 
keystring between two separate parties A (Alice) and B 
(Bob). Two important goals in experimental and theo- 
retical research in QKD are (i) increasing the security 
and (a) increasing the bit transmission rate between A 
and B. It has been shown that they can achieve both 
of these goals by using higher-dimensional qudits (with 
d orthogonal states) For example, for the d — A 

case (qu-quarts), using a generalized BB84 or BBM pro- 
tocol, the transmission rate would be improved from ^ 
(for qubits) to 1 bit per photon (BB84) or photon pair 
(BBM). The error rate due to eavesdropping based on 
the intercept-resend strategy would also increase from j 
to |, therefore improving the security. 

Photon pairs obtained from parametric down- 
conversion have played a crucial role in the experimen- 
tal investigation of the fundamentals and applications 
of quantum mechanics On the one hand, most ex- 
periments in quantum information and computation use 
photons pairs entangled in the polarization degree of 
freedom (DOF) 0|. On the other hand, position- 
momentum entanglement has been investigated and uti- 
lized for more than ten years in the context of quan- 
tum imaging [lol[lllll2l| and more recently, it was shown 
that down-converted photon pairs are indeed entangled 
in position-momentum IbSL Il4l through the violation of 
a separability criterion I1(t| . Photons are the obvious 
choice for QKD, due to the ease in which approximate 
single photon pulses or entangled photon pairs can be 
produced, manipulated and transmitted. Using entan- 
gled photons, QKD has been demonstrated using polar- 
ization [itI E^, time- bin 19] and transverse position- 
momentum |2Jj. 



In this letter, we show that it is possible to cre- 
ate and measure down-converted photons which are si- 
multaneously entangled in both polarization and trans- 
verse position-momentum. Entanglement in position- 
momentum is very robust and it is, in fact, actually dif- 
ficult to produce down-converted photons pairs that are 
not entangled in position- momentum l23l| . Most of the 
sources of polarization entangled photons, which gener- 
ally rely on the superposition of two emission cones 
already produce entanglement in position-momentum. A 
difficulty arises in that this superposition is obtained 
in the far-field, so that by performing a position mea- 
surement by imaging one or both photons creates dis- 
tinguishability in the form of "which cone" information. 
Thus, in order to utilize both position-momentum and 
polarization correlations in a QKD protocol, it is nec- 
essary to develop a position-momentum measurement 
scheme which does not destroy polarization entangle- 
ment. Here we demonstrate experimentally that the 
quantum correlations between position-momentum and 
polarization of photon pairs can be produced and de- 
tected simultaneously. We then show that these simul- 
taneous correlations can be used to implement QKD 
protocols based on four-dimensional states, which en- 
hance the transmission rate per photon pair and sensi- 
tivity to eavesdropping. We provide three possible pro- 
tocols: a parallel protocol with average transmission rate 
1 bit/photon pair and error rate of ;|, a qu-quart proto- 
col with average transmission rate 1 bit/photon pair and 
error rate of | , and a deterministic skewed qu-quart pro- 
tocol with transmission rate 1 bit /photon pair and error 
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The experimental setup is shown in Fig. ^ A He- 
Cd laser was used to pump two 2 mm long Lithium lo- 
date crystals arranged with their optic axes perpendicu- 
lar, creating down-converted signal and idler photons, as 
reported in Ref. 's^. The signal and idler photons were 
sent to detection systems A and B respectively. Coinci- 
dence counts were registered using SPCM single photon 
counting modules equipped with 12 nm FWHM band- 
width interference filters and 0.3 mm diameter detection 
apertures. Coincidence and single counts were registered 
using coincidence electronics and a personal computer. 

It is well known that this source can be used to create 
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FIG. 1: a) Experimental setup for QKD. The PBS and HWP 
are used for polarization measurements, b) Lens system for 
momentum measurements. See text, c) Lens system for po- 
sition measurements. See text. 



hoton pairs in a maximally entangled polarization state 
The polarization of the pump beam was adjusted us- 
ing half- and quarter-wave plates so that the photon pairs 
were in the state 1^") = (\HH) - \ VV))/y/2- With the 
lens systems removed, the polarization entanglement was 
initially verified by performing the usual polarization in- 
terference measurements using linear polarization analyz- 
ers consisting of half- wave plates (HWP) and polarizing 
beam splitters (PBS), where one of the analyzers is kept 
fixed at 45° and the other is rotated. Interference curves 
with visibilities above 95 % were typically observed in 
the coincidence counts, while the single count rates re- 
mained approximately constant, indicating a high degree 
of entanglement. 

Due to phase matching in SPDC, anti-correlation is ob- 
served in transverse momentum measurements. That is, 
if one detects a signal photon with momentum p, one 
finds an idler photon with momentum —p. One can 
measure momentum by creating the Fourier transform 
of the field at the source on the detection plane. This is 
achieved using a lens placed so that the image and object 
planes each lie in the focal plane of the lens, therefore 
mapping the transverse momentum distribution of the 
photons at the crystal face onto positions in the detec- 
tion plane. Fig. ^ b) shows our lens system consisting 
of a lens with focal length F = 500 mm. The detec- 
tors were placed 1 m from the source. It is thus possible 
to choose detector positions that exhibit a high spatial 
anti-correlation. Fig. [21a) shows coincidence counts for 
2 sets of detector positions which display high momen- 
tum anti-correlations. Positions Api and Ap2 correspond 
to positions of detector A and likewise Bpi and Bp2 for 
detector B. Also shown is a diagram of the detector po- 
sitions, from which it can be seen that when one photon 
is detected in the upper position, the other is detected in 
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FIG. 2; a) Experimental results showing correlations in 
a) momentum-momentum measurements and b) position- 
position measurements. Also shown is a diagram of each mea- 
surement scheme (see text). 



the lower position, illustrating the anti-correlation in mo- 
mentum measurements. The polarization analyzers were 
orientated at 9a — —45° and 6b ^ 45° to ensure that we 
collected photons from both crystals. 

Position measurements can be performed by cre ating 
the image of the source at the detection plane 0, 
Using an imaging system we see position correlations: 
if the signal photon is detected at position x, the idler 
photon is found at the same position x. Position correla- 
tions in down-converted photons are due to the fact that 
the photons are "born" at the same position in the crys- 
tal. However, simply imaging the crystal face will destroy 
the polarization entanglement present in this two-crystal 
source. It has been shown that a two-crystal source 
displays interference that is analogous to a two-photon 
double-slit experiment [ij. Thus imaging the crystal 
face provides "which-crystal" information that destroys 
polarization interference. In order to overcome this dif- 
ficulty, we developed a slightly more complex position 
measurement system, shown in Fig. Qc). A lens is used 
to image the crystal face at an intermediate plane P. A 
thin blade is placed in plane P such that it blocks half of 
the image, while a second lens placed in a Fourier con- 
figuration is then used to filter the spatial modes, which 
removes which path information. Instead of moving the 
detector, the blade position was varied. For each detec- 
tion system we defined positions A^i, Ax2, B^i and Bx2 
of the blade in the image plane P. We emphasize that 
this two lens system does not perform the Fourier trans- 
form of the crystal face, since the blade removes half of 
the image. Using this detection system we measured the 
position correlations, which are shown in Fig. Elb). The 
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FIG. 3: Experimental results for position-momentum mea- 
surements. Also shown is a diagram of the measurement 
scheme (see text). 
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FIG. 4: Polarization correlation measurements for a) mo- 
mentum measurements: Ap\Bpi (red bars) and Ap2Bp2 (grey 
bars) and b) position measurements A^iB^i (red bars) and 
Ax2Bx2 (grey bars). The insets show the polarization inter- 
ference curves. 



diagram shows the positions of the blades corresponding 
to each measurement, which shows that in this case we 
have position correlations instead of anti-correlations as 
in the momentum-momentum case. 

Since position and momentum are complementary ob- 
servables, there is a complete absence of correlation when 
systems A and B perform measurements in different 
bases. Fig. |21 shows measurement results when A im- 
plements a momentum measurement and B implements 
a position measurement. There is roughly the same de- 
tection probability for all detector combinations, which 
shows that there is no correlation between the detection 
positions. 

In order to use polarization entanglement along with 
position-momentum correlations to establish a random 
keystring, it is necessary that the polarization state re- 
mains the same for all possible position-momentum mea- 
surement configurations. Having established adequate 
position and momentum detection systems, we then per- 
formed polarization interference measurements in order 
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FIG. 5: a) Polarization correlation measurements for a) 
position-momentum measurements AxiBp\ (red bars) and 
AxiBp2 (grey bars), and b) position-momentum measure- 
ments AxiBpi (red bars) and Ax2Bp2 (grey bars). The insets 
show the polarization interference curves. 



to confirm that polarization correlations observed with 
different position-momentum measurement systems were 
the same. Interference curves with visibilities ranging 
from 82% to 92% were observed. Just as important as 
the interference visibility in this case is the relative phase 
of the polarization state, which remained approximately 
constant for all measurements. Fig. ^ shows the po- 
larization correlations when A and B both measure in 
the a) momentum and b) position basis. Here we show 
coincidence counts for those detector combinations that 
result in nonzero coincidences. For combinations like 
ApiBp2 and AxiBx2^ the number of coincidence counts 
were found to be much smaller than combinations like 
ApiBpi and A^iBxi- Fig. shows coincidence counts 
for those cases in which A and B measure in different 
bases. Fig. Ela) and b) show polarization correlations for 
the case where A measures momentum while B measures 
position. The insets in FIG. 's 01 and [S] show polarization 
interference curves. All experimental results show that 
polarization correlations can be observed in parallel to 
position-momentum correlations. It is thus possible to 
use these DOF to implement QKD protocols. 

Let us briefly analyze some possible protocols which 
could be implemented with position-momentum and po- 
larization. One flrst possibility is to run two parallel 
and independent BBM protocols, one using polariza- 
tion entanglement and other using position-momentum 
correlations |2Clj . Since the two protocols are indepen- 
dent, Alice and Bob choose randomly between polariza- 
tion bases as well as position and momentum bases. In 
this case, an average transmission rate of one bit per pho- 
ton pair is achieved, since 1/4 of the time they choose the 
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same basis in both DOF and establish 2 bits, 1/2 of the 
time they choose the same basis in only one DOF and 
establish 1 bit, and 1/4 of the time they choose differ- 
ent bases in both DOF. The error rate due to intercept- 
resend eavesdropping is the same as a single BBM pro- 
tocol: J. 

A second possibility is encoding in qu-quarts instead of 
qubits. A four-dimensional alphabet can be defined us- 
ing position-momentum and polarization. For instance, 
let us define a = H,Xi, which stands for one photon 
with linear polarization H at position Xi , b = X2 , 
c = V,Xi and d = V, X2 ■ A complementary alphabet 
would be: a = +, Pi, which stands for one photon with 
linear polarization +45° and momentum Pi, P = +,P2, 
7 = — ,Pi and S = — ,^2- Alice and Bob then both 
choose between two sets of measurements: the roman 
letter basis, consisting of H/V polarization and X mea- 
surements, or the greek letter basis, comprised of +/— 
polarization and P measurements. Here the transmis- 
sion rate is again 1 bit per photon pair, since 1/2 of the 
time they choose the same basis and establish 2 random 
bits, while the other 1/2 of the time they choose different 
bases and establish no random bits. In addition to the 
increase in the transmission rate, the error rate due to 
intercept-resend eavesdropping would be improved from 
I; to I , since Eve chooses the wrong basis with probabil- 
ity 1/2 and consequently has a 3/4 probability to send 
the wrong state. 

A third possibility is for Alice and Bob to skew their 
combined measurements. For example, suppose Alice 
chooses between (i) H/V polarization and X measure- 
ments and (a) +/— polarization and P measurements, 
while Bob chooses between (i) H/V polarization and P 
measurements and (ii) +/— polarization and X measure- 
ments. Skewing the measurement bases guarantees that 
Alice and Bob always agree on a basis in one DOF. This 
protocol is deterministic, in the sense that Alice and Bob 
establish one random bit for every photon pair sent, and 
thus every photon pair contributes to the sifted key. 

We note that this last example is similar to a recent 
proposal for deterministic QKD where security is pro- 
vided by AVN tests of local realism 0| . In the protocol 
proposed in Ref. [l^i Alice and Bob choose randomly 
between three groups of measurements. Two of the mea- 
surement groups are analogous to the skewed basis ab 
ove. It is possible to implement QKD based on AVN with 
polarization and position-momentum, however, our ex- 
perimental results are not sufficient to demonstrate such 
a protocol. One measurement required is a single-photon 
Bell state measurement, which could be realized with lin- 
ear optics I23. The transmission rate QKD based on 
AVN is still one bit per photon pair. The error rate 
was not analyzed in R.ef . (22i] . but it we conjecture that 
it would be increased, since the three groups of measure- 
ments are analogous to three basis. 

In summary, we have experimentally observed the 



simultaneous entanglement between polarization and 
position-momentum of photon pairs from parametric 
down-conversion. Our results show that four-dimensional 
quantum key distribution can be implemented using 
these degrees of freedom, enhancing the transmission rate 
and error rate induced by eavesdropping. 
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